hmm but what should i do else
#development
olive peak
proper reef
Then the bundle ID might be hardcoded in the app binary
olive peak
Then the bundle ID might be hardcoded in the app binary
maybe, but if it is, its encrytped
proper reef
Who encrypts their bundle identifiers lol
proper reef
Ok
proper reef
Where is it in the memory
proper reef
.
olive peak
you mean memory region?
harsh junco
oop talk
olive peak
.
some are in audioDsp and some are in the apps framework
1 is malloc and 1 is not malloc? i gess
hasty ruin
To use xcode
radiant idol
why would you want to do that
proper reef
To use xcode
External build system though
You can use that to have Xcode use make files
faint stag
well, only while the app is running
this is why we have process filters 
olive peak
does %hook need jit
ashen birch
https://github.com/m1stadev/apple-compress i did python bindings for libcompression if anyone cares
(maybe @silver rampart?)
faint stag
does %hook need jit
no
faint stag
yeah
olive peak
thanks good
radiant idol
Prysm used to be paid
but went free when LaughingQuoll left the jailbreaking community
well he left a while before
but I think he had a car accident or something
yeah
RIP
proper reef
Gotta setup simject again
olive peak
we've been using substrate without a jb for a while now
yes but hook doesnt work still?
for symbols without fish hok?
faint stag
yes but hook doesnt work still?
well MSHookFunction is an issue yes
fishook and dobby are your alternatives here
hasty ruin
Hooking objc methods does not need jit
hasty ruin
Chat what do we think of the Comic Sans MS usage here
You’re now alfie3
proper reef
Chat what do we think of the Comic Sans MS usage here
It’s actually not as bad as I would’ve assumed based on the fact it’s comic sans
sonic totem
I need a good font
olive peak
C function hooks
from libc?
olive peak
not objc
faint stag
I need a good font
victor mono
hasty ruin
libc isn’t c
acoustic imp
proper reef
It looks like I’m gonna be able to get simject working…. in my macOS 15 vm….
proper reef
I want to see code written in SF Hello
hasty ruin
Wingdings
sonic totem
Okay what about this
olive peak
how do i retrieve the string on that index
radiant idol
[self valueForKey:@"..."]
olive peak
thankx
native orbit
use word instead of vscode for the full experience
radiant idol
Okay what about this
show some other func smh
sonic totem
show some other func smh
I see you trying to get your hands on some leaked Achilles v2 code 
olive peak
`[(%orig) valueForKey:@"..."]`
how do i set it
radiant idol
[%orig setValue:@"..." forKey:@"..."]
faint stag
Okay what about this
comic code + catppuccin 
hasty ruin
comic code + catppuccin <:intjpray:751193136302260394>
looks like a font a typescript dev would use
faint stag
looks like a font a typescript dev would use
i'm not a typescript dev so no offense was taken
acoustic imp
Can I delete this ? Path - /var/root/Library/Caches/com.apple.coresymbolicationd
hasty ruin
i'm not a typescript dev so no offense was taken
that’s the exact reason why you should take offence to it
typescript is a disease
hasty ruin
Can I delete this ? Path - /var/root/Library/Caches/com.apple.coresymbolicationd
Can you? Maybe, Idfk
Should you? Not at all
faint stag
Can I delete this ? Path - /var/root/Library/Caches/com.apple.coresymbolicationd
probably shouldn't do that
acoustic imp
K
sonic totem
okay we've gone with Fira Code
radiant idol
okay we've gone with Fira Code
this font is nice but it gives me a headache whenever i look at it
hexed knot
typescript is a disease
ts is good
faint stag
this font is nice but it gives me a headache whenever i look at it
now that's ironic
timid furnace
okay we've gone with Fira Code
sf mono
faint stag
now that's ironic
though i kinda don't like looking at it either
proper reef
how can a font be 'nice' but also physically painful
timid furnace
anti flash bang
sf mono
hasty ruin
nightwind logic
hasty ruin
anti flash bang
sf mono
does that ever log
faint stag
anti flash bang
sf mono
macOS font rendering makes most fonts look better
radiant idol
anti flash bang
sf mono
sf mono buddies 💪
proper reef
anti flash bang
sf mono
NSLog(format:@""); what kind of objc is this
hasty ruin
It’s a plugin
hexed knot
vscode plugin?
timid furnace
yes
hexed knot
wtf
timid furnace
NSLog(format:@""); what kind of objc is this
inlay hints
hexed knot
which one
timid furnace
its just clangd
hexed knot
oh that shit never worked for me
timid furnace
hasty ruin
doesn’t that leak really bad
radiant idol
it does after a bit
proper reef
ok time to hope that my sdk will work on this version of xcode
hasty ruin
or is that swift lsp
radiant idol
swift lsp
hasty ruin
average swift
radiant idol
because of course its the swift thing that leaks
faint stag
looks like a font a typescript dev would use
now this is one a typescript dev would use
hasty ruin
Fr
hasty ruin
now this is one a typescript dev would use
Delete this
timid furnace
yea windowserver is using more ram than that rn
hasty ruin
Before I do
radiant idol
now this is one a typescript dev would use
this hurts me more
native dune
https://github.com/m1stadev/apple-compress i did python bindings for libcompress...
oh this is cool
hasty ruin
yea windowserver is using more ram than that rn
Fucking windowserver
timid furnace
hasty ruin
z*fram
radiant idol
no but actually
hasty ruin
@radiant idol does clangd give proper autocomplete
radiant idol
yea
hasty ruin
radiant idol
just not for logos files
hasty ruin
might have to try it again
ashen birch
oh this is cool
once i impl into pyimg4 lzfse issues r finally fixed tro
(though it seems like a10 devices’ iboot can accept an uncompressed kernelcache, so maybe it never was a real issue in the first place? idk)
radiant idol
and it has a seizure if you try to use it in like a preference bundle of a tweak for some reason
timid furnace
no support for logos tho yea
you have to use cynder's llvm thing
if you want that
faint stag
this hurts me more
it's surprisingly ok once you turn off the italic stuff
radiant idol
but im lazyyyy
hasty ruin
you have to use cynder's llvm thing
I never got that working either 
timid furnace
radiant idol
shld i try it
hasty ruin
now this is one a typescript dev would use
@next wadi unironically uses this…
apparently that says self
but it’s clearly Jeff
proper reef
i have a great idea
proper reef
cursive font for vscode
faint stag
cursive font for vscode
oh that's easy enough
proper reef
oh that's easy enough
no not the modern kind - the unreadable 1800s kind
faint stag
yeah i know
radiant idol
Jailbreak text?
timid furnace
hasty ruin
Jailbreak text?
mfw stolen phone
proper reef
welp my xcode keeps crashing, strange
hasty ruin
Somehow still more readable than anything on https://GitHub.com/nightwinddev
proper reef
this is worse than the comic sans
native dune
Jailbreak text?
jailbreak center
hexed knot
put russian cyrillic in vscode
sonic totem
Webdings is a great font @timid furnace
snow python
Why were you up
timid furnace
Webdings is a great font <@218455673581600770>
timid furnace
guess
radiant idol
Somehow still more readable than anything on https://GitHub.com/nightwinddev
i dislike you
hasty ruin
i dislike you
and I hate you, so we’re almost even 🤝
timid furnace
ok you all are wrong it's Apple Color Emoji
snow python
Do I have plans, yes, will it take a while because I have poor time management skills? Yes. I don't have a jailbroken device rn
proper reef
It’s because I’m using it on the wrong macOS version
I’m using Xcode 13 on macOS 15
hasty ruin
Prostate
radiant idol
use Comfortaa
timid furnace
google sans 
timid furnace
use Comfortaa
idt i have that
radiant idol
L
timid furnace
thoughts
faint stag
lucida grande
radiant idol
i still have a headache from looking at it
the only one that doesnt give me one is SF Pro
timid furnace
Cascadia Code
sonic totem
New font eta son
proper reef
try BiauKai
radiant idol
yessir
timid furnace
My second would be Hack or Input Mono tho yea
timid furnace
wait what
timid furnace
Apparently iMessage activation is broken on iOS 16
src?
hasty ruin
I kept getting “error activating iMessage” alerts (16.2)
Got a new SIM card today, now it just sits on “waiting for activation”
whitetail tested on 16.7.2 or smth, and it isn’t working for them either. They tried on 15.smth and it worked
Surely it can’t be intentional, as A11 is stuck there…
proper reef
did my VM just break
next wadi
now this is one a typescript dev would use
alright bro
hasty ruin
timid furnace
want me to try with a sim
hasty ruin
it’s just linking number that isn’t working
proper reef
And yup it does want me to reinstall macOS 15
hasty ruin
these look kinda odd
radiant idol
CENSORSHIP
hasty ruin
timid furnace
@hasty ruin
timid furnace
hasty ruin
unfair
hasty ruin
Which device
timid furnace
ip 8 16.5 beta 4 or smth
timid furnace
proper reef
ill ask them
proper reef
ok
proper reef
i love it how my macos vm just bricked
timid furnace
lmao what
hasty ruin
Ok nvm my carrier just messaged me saying I have to pay for that
So it got sent as an attachment??
timid furnace
lmao
proper reef
welp
hasty ruin
😭
proper reef
i guess so
native dune
Ok nvm my carrier just messaged me saying I have to pay for that
lmaoo
hasty ruin
Ok nvm my carrier just messaged me saying I have to pay for that
Mfs just charged me 30p for a bug
hasty ruin
capitalism
proper reef
capitalism <:troll:794397046706667530>
real
shrewd smelt
Mfs just charged me 30p for a bug
pretty sure it just sends the picture to android users
gentle grove
input mono
wtf is this code 😭
hasty ruin
if you send gamepigeon to green bubble it comes thru as a picture on their end
fucking androiders
timid furnace
wtf is this code 😭
it reboots the phone
gentle grove
why does it take arguments and not use them
timid furnace
because copilot wrote that part
sonic totem
timid furnace
i always use copilot to write the main function and then i replace the code inside
uh
idk
lets see
do i install ttf or variable
timid furnace
gentle grove
it should work i think
unless macos is stupid
then you dont have to go install 10 font files
timid furnace
gentle grove
wholesome
tender imp
<@462696257924759572> how does it look on your end?
was a text as in green
sonic totem
Pretty sure I might have asked you this already, but did userspace reboot not do the same for enabling developer mode?
timid furnace
feels a little too condensed
sonic totem
Oh wait it was nvram stuff wasn’t it
timid furnace
Nah, basically the kernel will lock the value if the nvram variable isn't set on boot
if you set the NVRAM variable then it's unlocked and unset, and once you set it it'll lock
and the variable is deleted after
timid furnace
<@218455673581600770> all the fonts look the same
this feels a little too condensed
so im just gonna go back to sf mono
timid furnace
at least until i get back to my 1080 monitor so i can compare on that
timid furnace
ye
gentle grove
it looks like a font
hasty ruin
was a text as in green
i received your response on mac but not phone
😭
even tho its green
timid furnace
lmao what
tender imp
even tho its green
🗿
summer zealot
When are we expecting the TAG writeup?
tender imp
my texts sent as imessage, yours were green
tender imp
mine were blue
hasty ruin
bc theyre grey ofc
tender imp
yours were not
tender imp
W
sonic totem
When are we expecting the TAG writeup?
summer zealot
drifting heron
Do I have plans, yes, will it take a while because I have poor time management s...
good to hear man! appreciate it
ashen birch
https://vxtwitter.com/memecrashes/status/1741206245313216982?s=46 for all you nerds
primal perch
Why were you up
uhhh
hasty ruin
gorning
primal perch
https://vxtwitter.com/memecrashes/status/1741206245313216982?s=46 for all you ne...
this but unironically
if it’s used 1 billion times that’s collective years saved
proper reef
https://vxtwitter.com/dmimno/status/1679474354579488771
you know who loves python?
people who aren't programmers
the people in my uni's chemistry department use it
visual meadow
hasty ruin
did you install an app made by @turbid fjord
radiant idol
i am 5m away actually
timid briar
5 uhh
moons away
hasty ruin
mods this "developer" is threatening innocent users
radiant idol
mods this "developer" is threatening innocent users
mods this "developer" is bootlooping people's phones through his "tweak"
radiant idol
i dont distribute jade
mods this "developer" is stealing tweak names from google
timid furnace
mods there are fake developers in the development channel
radiant idol
mods there is OOP in the development channel
proper reef
i am a proud fake developer
hasty ruin
mods this "developer" is stealing tweak names from google
mods this "developer" is stealing tweak ideas from past devs
timid furnace
we need a no OOP emote
radiant idol
mods this "developer" is stealing tweak ideas from past devs
mods this "developer" doesn't open source any of his big tweaks 
hasty ruin
mods this "developer" doesn't open source any of his big tweaks <:PointAndLaugh:...
show me jade source on gh
radiant idol
u dont have "big" free tweaks
hasty ruin
u dont have "big" free tweaks
searchdots is 300 lines
hasty ruin
like 100 of which is setting up uilabel properties
proper reef
i have made all of 1 tweak (its discontinued btw)
radiant idol
i have made all of 1 tweak (its discontinued btw)
whats the tweak
radiant idol
is it FOSS
proper reef
no
radiant idol
smh
proper reef
i don't own the rights to it
radiant idol
wdym
proper reef
i was paid by someone else to make it
proper reef
then they went under and it got discontinued
native orbit
proper reef
<:oop:1189757586854125639>
why is this not on this server.
native orbit
cuz i made it
radiant idol
why is this not on this server.
native orbit
hexed knot
primal perch
@hasty ruin
hasty ruin
@primal perch
primal perch
gm
proper reef
i used to have a job
ocean raptor
Which is not a surprise to anyone
primal perch
That means I’m better than you
real!
daring grail
how to learn c
ocean raptor
how to learn c
proper reef
communist doesn't have a job, what a surprise
I got laid off
primal perch
olive peak
what could an app detect about resigking other than the bubdle id? certificwte?
fossil swallow
the meal:
olive peak
how would i hook this? its not part of any class is it
i have a feeling that it could possibly detect that
theyre all not part of a class right
olive peak
hookf?
olive peak
C ain’t have classes
but thats objc
thats why its confusing
all other objc i hook with %hook class
and this with hookf
what would i need to do if i want to return data from another file
olive peak
return @“/var/mobile/Documents/gaysex.txt”;
but it doesnt return nsstring
or well maybe
but it returns the contents not file path right
could i call orig with modified arguments
olive peak
thanks
do you also know how i could check who calls it, which library
because if i modify bundle id in dictionary it crashes
or wouldnt that get called from foundation always
primal perch
you could check for if the path matches a path you’re looking for then intentionally crash and read backlog
or use a debugger
or something like this
or open the binary you’re trying to modify in ida/ghidra/binja
olive peak
you could check for if the path matches a path you’re looking for then intention...
im talking about the nsbundle infoDictionary hook
the issue is if i change the bundle id there
it tries to call some important function with the wrong bundle id
like CFBundleDlfcnLoadFramework
which crashes
primal perch
yeah that’s not shocking
primal perch
what are u tryna accomplish
olive peak
i dont want it to detect resigning, it checks bundle id
primal perch
can you not just hook that function
primal perch
just inject to com.apple.Security and hook it and log the process name
if it’s behind an unhookable process idk
cope and or ask @hasty ruin
icraze loves helping
olive peak
just inject to com.apple.Security and hook it and log the process name
huh
what would that help
processname
olive peak
is this wrong
sonic totem
What’s the quickest way to get the path to my data container in Swift?
proper reef
What’s the quickest way to get the path to my data container in Swift?
ObjC
sonic totem
Okay, what’s the quickest way to get the path to my data container in ObjC? 😅
sonic totem
Yeah
proper reef
Hmm one moment trying to remember
sonic totem
I can figure it out it’s fine
Almost at my Mac
Presumably it would just be getting the Documents directory and removing the last path component?
Well that works so I’ll do it for now
There’s no built in version for Bundle.main though
hasty ruin
Presumably it would just be getting the Documents directory and removing the las...
Yeah that’s what I normally do
slender glade
Presumably it would just be getting the Documents directory and removing the las...
I think NSHomeDirectory worked for this
actually prob not
acoustic imp
POV u used the bootstrap, can’t open AM now
brazen timber
wrong!!! I had a internship last summer, cope liberals
hexed knot
I got laid off
That means u werent good enough
slender glade
brazen timber
That means u werent good enough
olive peak
how could an app get the bundleID if it also has </string> after it but theres no embedded.mobileprovision file
it means it should be reading from a file righ
im searching the memory of the app
and it has multiple bundle id strings
but some have </string> after the bundle id
sonic totem
You can read the embedded entitlements in the code signature
That will contain the bundle ID
olive peak
still trying to find sideload bypass detection
sonic totem
Sideload bypass detection?
native orbit
some apps have detection if its been decrypted then sideloaded
native orbit
yep
sonic totem
Unless you literally inspect the executable itself
And check for the encryption load command
hasty ruin
I thought the only way to check is by checking for embedded.mobileprovision
and bundle id mangling
when sideloaded with free dev accounts
(brokie detection)
native orbit
(brokie detection)
paying apple even more money 🤝
olive peak
and bundle id mangling
thats most likely what it detects
changed bundle id
so i can see if it still finds the not original bundle id
olive peak
You can read the embedded entitlements in the code signature
can i do that with SecCertificateCopyData
proper reef
@olive peak does it detect being sideloaded on a jailbroken device via appsync
olive peak
<@1102934516097630258> does it detect being sideloaded on a jailbroken device vi...
didnt try, but supposedly it doesnt detect it when sideloading via esign (i didnt try because esign seems sketchy)
proper reef
try it with appsync because that won't change bundle id
hasty ruin
didnt try, but supposedly it doesnt detect it when sideloading via esign (i didn...
esign is legit
not all Chinese software is spyware
proper reef
not all Chinese software is spyware <:trol:831188670848565289>
don't worry we're changing that
olive peak
not all Chinese software is spyware <:trol:831188670848565289>
well the sources are weird, i couldnt find an original website, only some weird ones
proper reef
we here at the ccp have realized we still don't have enough share of the spyware market
olive peak
don't worry we're changing that
does appsync work on rootless
proper reef
does appsync work on rootless
i have no clue, i've never used rootless
hasty ruin
does appsync work on rootless
just install with trollstore
proper reef
good point
olive peak
just install with trollstore
right
hasty ruin
we here at the ccp have realized we still don't have enough share of the spyware...
Did zefram take over
slender glade
@tawdry storm @shrewd smelt @grim sparrow @turbid fjord
slender glade
I’m so happy brah
pearl sail
I’m so happy brah
Gets banned from your own club
tawdry storm
I’m so happy brah
Program in scratch 🤑
pearl sail
Hope they’re not all lame nerds
Better for your college resume that they are tbh
proper reef
Did zefram take over
no, it has a 0% market share due to bootlooping every user
hexed knot
Better for your college resume that they are tbh
Oh
brazen timber
<@557572475429453834> <@1088593923661893703> <@270540064512147456> <@35684742497...
wtf 14 people signed up on their own will
slender glade
Can u shut the fuck up goddam
pearl sail
Can’t bootloop when it doesn’t exist
olive peak
trollstore doesnt detect
turbid fjord
<@557572475429453834> <@1088593923661893703> <@270540064512147456> <@35684742497...
Ggs
olive peak
trollstore doesnt detect
@proper reef doesnt get detected
but if i resign it i cant keep the original bundle id can i
granite frigate
<@557572475429453834> <@1088593923661893703> <@270540064512147456> <@35684742497...
i wouldn’t mind being taught by you
https://cdn.discordapp.com/emojis/1140945594798571540.webp?size=48
slender glade
i wouldn’t mind being taught by you
https://cdn.discordapp.com/emojis/1140945594...
You’re like 7k km away otherwise I’d be happy to teach you as well
native orbit
whole other side of planet fr
granite frigate
Real
grim sparrow
<@557572475429453834> <@1088593923661893703> <@270540064512147456> <@35684742497...
That’s so slay
olive peak
so where could the app get the bundle id plus the </string>
i assume thats where it gets it from to detect
cloud yacht
POV u used the bootstrap, can’t open AM now
Personally I prefer FM
olive peak
well it has to read it somewhere, where also the string exists otherwise i dont get why its added
there are some sec functions imported
these are the ones imported by the binary
good point
would i hook it like this
missplaced comma
oopsy
it isnt imported tho
i doubt its either because i hooked these things already
how would i log this tho CFDictionaryRef query, CFTypeRef _Nullable *result
thanks
welp it doesnt get called once
indigo peak
I have a question how dispatch_once works on runtime
Like if I have a function that’s being called multiple times a second, and I have variables that only need to be calculated once, and I make them static & assign them inside a dispatch_once, what happens on the next calls, like how does the runtime code work
Does it like “implement” a if statement to check if the token is assigned, and if so skip?
Or am I missing something
I’m trying to make the code as efficient as possible and just curious if dispatch once is even worth my time yk
like for example CMGetAttachment on a buffer that isn’t changing from the first call to the last call that later is being used on CMSetAttachment
alr
amber pewter
does anyone know if FLEXall tweak works on rootless?
indigo peak
trying to make this as efficient as possible but it’s hard lmfao
olive peak
the memory search actually found this, but with the actual bundleid, but from what file is this
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>application-identifier</key>
<string>AXLW72RHZ7.<appBundle>.AXLW72RHZ7</string>
<key>com.apple.developer.team-identifier</key>
<string>AXLW72RHZ7</string>
<key>get-task-allow</key>
<true/>
<key>keychain-access-groups</key>
<array>
<string>AXLW72RHZ7.*</string>
</array>
</dict>
</plist>
DTD plist
timid furnace
I have a question how dispatch_once works on runtime
Like if I have a function ...
wait
what
is there a value that signifies unset for the variable?
ie. does 0 mean unset?
if you don't need to worry about multi-threading this is overkill though
void joe(void) {
static NSString *string = nil;
if (!string)
// string = calculateString();
string = @"balls";
});
printf("%s\n", string.UTF8String);
}
if the function isn't gonna be called concurrently, then this is fine
yea so it depends on the context
idk wtf CMGetAttachment is
so
yea idk
at the end of the day, just use dispatch_once
timid furnace
```c
void joe(void) {
static NSString *string = nil;
if (!string)
...
if there is no concurrent access, you can simplify it to this
inb4 macho parser
olive peak
i cant find the file in .app tho with these contents
yes
i dont think it can just make that up tho
it has to be getting it somewhere
yes
i find this very weird
by the way the jailbreak detection of the same app can be bypassed by hooking readdir
so if i want to find where it gets called i just need to find readdir in ida?
hook to return null if it tries to read directories that usually arent accessible without jb
i dont know but maybe it gets called at the same function as the jb check
so if i want to find the jb check function i just need to find readdir in ida and then go back to its xrefs
i want to patch the bundle id
check
oh
summer zealot
Gm
olive peak
yes i understand that
it didnt even get called once when i hooked it but ill try again
in hookf i still log using nslog right
hexed knot
NXLog
timid furnace
what if they're using isEqualToString
olive peak
what if they're using isEqualToString
i hooked that too
timid furnace
just reverse it
at this point
understandable
yea sometimes its just easier to hook and then ```objc
NSLog(@"%@", NSThread.callStackSymbols);
no
idt those are stock
olive peak
i hooked but it either doesnt get called or log doesnt work
%hookf(int, strcmp, const char* str1, const char* str2) {
NSLog(@"strcmp %s %s", str1, str2);
return %orig;
}
%hookf(int, strncmp, const char* str1, const char* str2, size_t num) {
NSLog(@"strncmp %s %s", str1, str2);
return %orig;
}
%hookf(int, strcasecmp, const char* str1, const char* str2) {
NSLog(@"strcasecmp %s %s", str1, str2);
return %orig;
}
%hookf(int, strncasecmp, const char* str1, const char* str2, size_t num) {
NSLog(@"strncasecmp %s %s", str1, str2);
return %orig;
}
yea it's from youtube
olive peak
doesnt crash
yes
well it doesnt abort either
%hookf(int, strcmp, const char* str1, const char* str2) {
NSLog(@"strcmp %s %s", str1, str2);
abort();
return %orig;
}
%hookf(int, strncmp, const char* str1, const char* str2, size_t num) {
NSLog(@"strncmp %s %s", str1, str2);
abort();
return %orig;
}
%hookf(int, strcasecmp, const char* str1, const char* str2) {
NSLog(@"strcasecmp %s %s", str1, str2);
abort();
return %orig;
}
%hookf(int, strncasecmp, const char* str1, const char* str2, size_t num) {
NSLog(@"strncasecmp %s %s", str1, str2);
abort();
return %orig;
}
yes
its loaded
native orbit
add log on ctor
olive peak
hexed knot
isnt this for jailbreak detection
native orbit
sideload detection
hexed knot
word
olive peak
even if i run it on mac
native orbit
macos a bitch for that
olive peak
thats another issue, it doesnt really fuck off but it just doesnt let me do anything
native orbit
what app is it btw
olive peak
im trying fishhook now
native orbit
very
timid furnace
Is there a kernel debug kit for macOS 14.2.1
no
summer zealot
Damn
Is there another to rebuild kernel cache
I really don’t want to reinstall macOS
summer zealot
There’s a debug kit for 14.3?
timid furnace
yes
summer zealot
what kernel cache are you trying to rebuild
Root volume
summer zealot
Does apple not have an install.pkg for 14.3?
I’m only seeing ipsw for apple silicon
I’m running a intel hackintosh
timid furnace
faint stag
these cdn urls are something else man
radiant idol
```c
%hookf(int, strcmp, const char* str1, const char* str2) {
NSLog(@"strcm...
spinlock panic moment
gaunt helm
these cdn urls are something else man
this one is fine idk what u mean
olive peak
fish hook works
gaunt helm
swcdn at least tells you what you're getting yourself into
torn oriole
The legacy url’s are what are something else
faint stag
fish hook works
as expected tbh
proper reef
Is there a kernel debug kit for macOS 14.2.1
i can look
olive peak
ok so i hooked the compare methods and the Sec method but none have the original bundleid
faint stag
Is there a kernel debug kit for macOS 14.2.1
nope
left lantern
kwk
summer zealot
he told me he is getting it from "some internal stuff"
left lantern
faint stag
crazy
left lantern
bomboclat
summer zealot
so it does exist
left lantern
of course it exists
left lantern
:troll
timid furnace
the kernel version?
no we don't check that
proper reef
he told me he is getting it from "some internal stuff"
pls dont tell global security 😦
olive peak
how else could they compare bundle id, i even checked memcmp
timid furnace
damn you apple
proper reef
how else could they compare bundle id, i even checked memcmp
==
proper reef
wait do you not need my kdk
timid furnace
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
proper reef
that compares the address doenst it
not if you dereference a c string
proper reef
irrelevant
ah ok
hexed knot
@olive peak Soooo whats the app
proper reef
inb4 onlyfans or snapchat or something
left lantern
inb4 sideload detection
proper reef
inb4 sideload detection
there is sideload detection
@olive peak is trying to bypass the detection
proper reef
o
left lantern
ye we agree kwk
olive peak
<@1102934516097630258> Soooo whats the app
how does that help
hexed knot
Knowing what youre working with helps
proper reef
all of us working on bypassing it would be much faster
proper reef
definitely porn
apple allows porn apps on the app store now???
radiant idol
how else could they compare bundle id, i even checked memcmp
like
compare two NSStrings?
left lantern
def snapchat
proper reef
what's it with snapchat and jb
hexed knot
People are creeps
proper reef
do they not know that Zefram has built in jb detect bypass for snapchat???
native dune
def snapchat
its not cuz snapchat only checks the embedded.mobileprovision file
left lantern
really? but i thought it could also detect what dylibs were loaded?
wheres cokepokes when you need him
native dune
really? but i thought it could also detect what dylibs were loaded?
Yeah I think it can
I’m talking about bundle id here
@limpid pumice is prob the person to ask
left lantern
Mmm
limpid pumice
<@1032414469642526801> is prob the person to ask
What'd I do?
native dune
How Snapchat detects bundle id
left lantern
not that lol
its just some guy before who was being cryptic about what hes trying to bypass detection on
native dune
Cuz we want to know what some guy is trying to tweak but he won’t say
native dune
Oh
left lantern
i was ab to say lol, yeah its not simply just bundle id or if the app has been tampered with
it has active detection
limpid pumice
You can patch one out, but there's gonna be another to check it
left lantern
cokepokes has been talked about it years ago
limpid pumice
changing bundle id is one of the easiest ways to catch a ban. but luckily, Snapchat has stopped banning 3rd party usage (at least for now)
still not entirely safe to do, but you won't catch a ban as fast as you normally would
limpid pumice
People are creeps
there are good reasons to tweak snapchat. not all Snapchat tweaks are made to be creepy
hexed knot
basically every tweak out there is a creep tweak
limpid pumice
mine really isn't
limpid pumice
iota
hexed knot
what does it do
limpid pumice
There are few features that can't be considered as "creepy" but actually do have some real usage that don't have that intent
people request tons of features that I deny as its more creepy than QOL.
I aim for more QOL than anything
hexed knot
what are the features
limpid pumice
I would send a screenshot, but feature list is too long
hexed knot
send a snippet
limpid pumice
one sec
hexed knot
cuz im curious ive never heard of it
limpid pumice
if you want, I have a discord for the tweak. there is a channel that lists every feature
limpid pumice
cuz im curious ive never heard of it
not all features, but a good chunk
I remember you
hexed knot
man.
limpid pumice
Its just like a message logger here on Discord. you find those creepy?
velvet path
there’s a reason they’re prohibited by Discord TOS too
limpid pumice
fair i guess
hasty ruin
real
hexed knot
idgaf abt the tos part i care about the shit is creepy part
limpid pumice
especially when they have massive vulnerabilities in the security.
limpid pumice
yes
hexed knot
damn
hexed knot
cmon man in the free version too?
limpid pumice
yeah, just enable the Snapchat+ spoof and you can toggle off My AI
turbid fjord
If we doing Snapchat tweaks we need a feature to block @hasty ruin
hexed knot
Also, if you think I am malicious. you should hear about my competition lmao
i mean what worse can it do
limpid pumice
I am talking about the developer
limpid pumice
oh i dont think youre a bad person
$20 tweak and he specifically sent /var wipers to the people who cracked it
hexed knot
meh its not a big deal
limpid pumice
no one has been banned with the bypass for over a year. nearing 2 years
hexed knot
$20 tweak and he specifically sent /var wipers to the people who cracked it
WE ❤️ MALICIOUS DRM
limpid pumice
I get protecting work, I just think bootlooping is too far
I have been on both sides. when i was broke, i used to use cracks. then i got a job and started buying all the tweaks i wanted. now i am making a paid tweak and i don't exactly like the idea of people pirating it. but i would never go that far as a punishment
limpid pumice
yeah, good point
hexed knot
i had drm for 2 weeks and then i was like ok no more
limpid pumice
was it that much of a nightmare? or people cracked it?
hexed knot
it got cracked unsuprisingly
turbid fjord
How did your interview go
The one you told me in DMs
Idk if you want me naming companies so
hexed knot
wow capt moved on from me
limpid pumice
I am hoping @faint timber will remember me. iirc, this was back when the Goblin jb was coming out and I had found a way to get substrate working on it with him. I was under a different alias at the time. I think it was "Anki" or "Slander".
I had gotten his iMessge and we talked for a bit there. but I lost it
limpid pumice
meh its not a big deal
What's crazy is I called him out on it and then he setup a fake discord dm with one of his admins under a fake name in the context of hearse selling the dude a DRM-less version of the tweak in hopes of me installing the /var wiper. So he tried to get me with the bootloop. But I reversed it and called him out on it again.
bunch of lore with the drama
left lantern
VAR wiper ☠️ mfs are ruthless nowadays what the fuck
limpid pumice
I can actually get a screenshot of the postinst
hexed knot
hearse made the tweak?
hexed knot
@grave sparrow is this the same hearse you said is a good dude
limpid pumice
hearse made the tweak?
yeah, he made Wicked, which is directly my competition
hexed knot
i remember hearse being a dude here but i dont remember him at all
just that he existed
limpid pumice
he got banned from when i called him out
hexed knot
My mind is deteriorating.
left lantern
lul so basically iota is the original?
limpid pumice
essentially
both Wicked and iota came from the same source
came from relicloader
left lantern
you or, another person who
ah
yknow , now that i’ve got you, do you know if i’d be able to run iota on my device? since i’m on 17.0 and all
limpid pumice
the original developer of the tweak AND bypass is no longer in the scene. left the code to hearse and I. hearse went off making his own fork, i did the same with mine.
limpid pumice
yknow , now that i’ve got you, do you know if i’d be able to run iota on my devi...
yeah, iota has an IPA
left lantern
the original developer of the tweak AND bypass is no longer in the scene. left t...
oof, he even dipped on twitter?
limpid pumice
oof, he even dipped on twitter?
yeah, dude is 100% no longer active in the community. I am still the only person who has contact with him
left lantern
yeah, iota has an IPA
and what about using the bootstrap that released a few days ago? would that allow notifications to work? i am unaware with the new entitlements shenanigans of iOS 14+
left lantern
yeah, dude is 100% no longer active in the community. I am still the only person...
damn, i hope he’s mentally doing well lol, that might’ve not been the reason why he left but i can imagine
limpid pumice
and what about using the bootstrap that released a few days ago? would that allo...
if you sign it, it depends on the certificate. if you install with trollstore, it will have every entitlement
but you are on iOS 17
so no trollstore
limpid pumice
oh
timid furnace
different bundle id causes notifications to break iirc
left lantern
i retained it when i updated kwk
limpid pumice
different bundle id causes notifications to break iirc
yeah, they can
left lantern
different bundle id causes notifications to break iirc
but i tested with wicked few days ago and it didn’t work :/ same bundle ID
timid furnace
limpid pumice
if you install with Trollstore, you definitely should have notifications
unless hearse changed the bundle id
i don't change the bundle id for iota
left lantern
yeah i did lol, that’s weird asf, nah it’s cool i mean i’d prefer being on iota anyways, im just on a device ID ban, but i don’t want tweaks i simply wanted to get back onto snap itself, so i wanted to make my own tweak but that’s out of the question atm
limpid pumice
damn, i hope he’s mentally doing well lol, that might’ve not been the reason why...
oh he is doing great. dude is doing good in college, got a gf, got a good job. hes living life
left lantern
thats bussin, glad to hear 🔥
brazen timber
sounds like i need to delete some var partitions too
left lantern
lulll
nah but yeah I'm interested on working on basically a device id ban bypass only, never been interested in saving snaps since they added the feature natively to snapchat
would you have something like that?
limpid pumice
yeah i did lol, that’s weird asf, nah it’s cool i mean i’d prefer being on iota ...
so the arabs that reversed old iota before I did the full rewrite, they posted the source
so you can use that as a basis to a snap tweak
left lantern
oh luh mao i wasn't aware of that, i'm barely easing my way back into the community as i relearn everything
well, with your permission, thats fine
limpid pumice
i dont really care, you will have to update a shit ton of the features. and there is no device ban bypass but it can be easily implemented. i can dm it to you
it is really messy code, now that i look back at it
limpid pumice
well, with your permission, thats fine
I also gave you iota lifetime
left lantern
i dont really care, you will have to update a shit ton of the features. and ther...
thats true, it is more of a way to understand rather than to just piece together since i have no doubt that leak is old asf
yeah if you don't mind, i don't really wanna take anything LMFAO i literally, posted me dabbing on my story, and posting with some sus emojis that suggested purchasing, and i got device banned like 4 months ago, thankfully TS 2 is out and many things have changed, but damn ive been so salty about that LMFAO
left lantern
I also gave you iota lifetime
actually yeah i forgor im in there, let me go over there for questions lul
thank you btw
limpid pumice
thats true, it is more of a way to *understand* rather than to just piece togeth...
yeah, its pretty old. iirc, these functions work meant to work with snapchat v11.80 at max
latest is snapchat v12.65.1
faint timber
I am hoping <@218213049381683200> will remember me. iirc, this was back when the...
I do remember you but much has changed since then including you having beef with a friend of mine so yike... not sure how to approach the situtation
limpid pumice
I do remember you but much has changed since then including you having beef with...
who?
is it Hearse?
faint timber
mhm
limpid pumice
well, i am sure there are things he is leaving out of all the drama
indigo peak
@limpid pumice ((id (*)(id, SEL, id)) objc_msgSend)(obj, sel, arg);
real
limpid pumice
https://tenor.com/view/eh-meh-jim-jim-halpert-the-office-gif-25317293
he wouldn't have Wicked if it wasn't for no5up. i wouldn't have iota if it wasn't for no5up. no5up is the original developer of the bypass. I talked to no5up the other day and he is still saying that its his bypass. he says that I am stealing code, even when he yoinked code from David Goldman's project and never followed the license conditions. there are lots of facts that hearse wont admit
faint timber
based
indigo peak
ok stupid question can i make dispatch_once run more than once 💀
faint timber
he wouldn't have Wicked if it wasn't for no5up. i wouldn't have iota if it wasn'...
maybe not but he certainly has the skillset, like me to do it on his own
indigo peak
or would it just be better to have a bool that is checked in if and set to !bool inside the if
limpid pumice
maybe not but he certainly has the skillset, like me to do it on his own
he didn't make that bypass on his own
left lantern
ok stupid question can i make dispatch_once run more than once 💀
yeah do dispatch_twice
limpid pumice
he meerly adapted from already made source
left lantern
faint timber
he didn't make that bypass on his own
but he could
timid furnace
ok stupid question can i make dispatch_once run more than once 💀
no without doing incredibly stupid things
indigo peak
<:fr:712506651520925698>
basically
reload = true;
if (condition) {
reload = true;
}
// later
if (reload) {
reload = false;
// ...
}
and i need like
really efficient version of this
timid furnace
well
indigo peak
and dispatch once is REALLY good for what i need
IF it was only ran once
but i need it to loop indefinitely
limpid pumice
*but he could*
there is just lots of things that he has done that are just not ethical. then becomes a hypocrite saying i stole code when there was never a license or anything saying i couldn't continue on my own project. even when he stole code from someone else and never followed the license conditions.
but apparently, i am still in the wrong
timid furnace
but i need it to loop indefinitely
ok well
indigo peak
ok well
its going through a video and i want it to forever go through the video
but if it runs through the whole duration it doesnt loop to the begining, so my method is to reinitialize the video yk what i mean
timid furnace
uh
primal perch
func () { dispatch_once(..{func()}}
dispatch_once(…, {func()})
indigo peak
1 function
limpid pumice
nonetheless, i respect you. i dont want beef with you. you are cool, i will leave this situation here and wont further it anymore. @faint timber